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(54) Digital image processing apparatus with storage of not-finishable jobs 



(57) A digital image reproduction apparatus is 
described, comprising a printer unit, a memory, an oper- 
ator control unit, integrated in the apparatus, provided 
with a keyboard and a display, for a user to give operat- 
ing commands to the apparatus, a network connection 
unit for coupling to a network for the purpose of commu- 
nication with a digital external environment which com- 
prises at least a number of workstations of users, a 
management unit connected to the said printer unit, 
memory and network connecting unit and, via the net- 
work connection unit, to the said workstations, which 
management unit maintains logic storage spaces in the 
memory, each allocated to a respective user. 

Digital data files sent from a user's workstation for 
printing by the printer unit contain an identification of the 
relevant user and are either of a first type or of a second 
type. 

The first type is formed by files which must be 
printed automatically, and the second type is formed by 
files which must be stored in the logic storage space of 
the user in the memory and may be printed only on a 
command from the operator control unit, which com- 
mand identifies the relevant file. 

When handling a print job, the management unit 
checks, whether the job can be performed completely. If 
this appears not to be the case, the management unit 
converts the file into a file of the second type, if neces- 
sary creates a logic storage space for the relevant user 
and stores the file in the logic storage space of the rele- 
vant user. 



Reasons why it may not be possible to perform a 
job completely, are, for instance: 

the sender of the print job is not authorized to have 
jobs printed on the particular device 
there is no print paper available of the kind specified 
in the job 

the job is broken off by a stop command by an oper- 
ator 

j - a non-recoverable machine error takes place. 

The same mechanism is also used for scan and 
copy jobs in the latter two cases mentioned above. 

As a result, the file is not lost but remains available. 
On a command from the apparatus operator control 
panel, it can be retrieved and the job resumed. 
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Description 

[0001] The invention relates to a digital image 
processing apparatus for use by a plurality of users, 
comprising s 
an image conversion unit; a local memory; a local oper- 
ator control unit, integrated in the apparatus, provided 
with inputting means and a display, for a user to give 
operating commands to the apparatus; and a manage- 
ment unit connected to the said memory, for controlling 
image conversion jobs to be performed for a user by the 
image processing apparatus, said management unit 
maintaining a plurality of logic storage spaces in the 
memory, each allocated to a respective user, and said 
management unit being capable of storing data relating 
to an image conversion job for a user, in the logic stor- 
age space allocated to said user, from which logic stor- 
age space said data can exclusively be retrieved upon a 
command from a user, said command specifying the rel- 
evant job. 

[0002] An apparatus of this kind is known from Appli- 
cants' European Patent Application EP 0 814 424 A. 
This known apparatus is a digital copier/printer con- 
nected to a network, to which also a plurality of user 
workstations is connected. 

[0003] Digital data files sent from a user's workstation 
for printing by the known apparatus are either of a first 
type or of a second type. The first type is formed by files 
which must be printed automatically, and the second 
type is formed by files which must be stored in the logic 
storage space of the user (sender) in the memory with- 
out any further action. A user wishing to have a file of 
the second type printed must select the relevant job and 
give a print command, using the buttons on the operator 
control panel of the device. 

[0004] In this publication, the processing of a data file 
of the second type for printing is referred to as "deferred 
printing", the term "command-controlled mode" also 
being used. In the following description, this method of 
processing will be referred to as "interactive printing". 
The said publication also refers to the processing of a 
data file of the first type as being a "(remote-started) 
print job", and the term "autonomous mode", while this 
method will be referred to in the following description as 
"automatic printing". 

[0005] It sometimes occurs that a print job of the first 
type cannot be processed, for instance because: 

the sender of the print job is not authorized to have 
jobs printed on the particular device 
there is no print paper available of the kind specified 
in the job 

the job is broken off by a stop command given by an 
operator at the device 

a non-recoverable machine error takes place. 

[0006] In many of these cases, the print file is then 
lost, or it may remain in the memory, waiting till the con- 



ditions for printing are met, but blocks the print queue, 
so that other jobs cannot be printed either. 
[0007] The object of the present invention is to obviate 
this unwished effect, and to this end, the management 
unit, when handling an image conversion job, checks 
whether said job can be performed completely, and in 
the case that said job cannot be performed completely, 
enters the data relating to said job in the logic storage 
space of the relevant user. 

[0008] As a result, the file is not lost but remains avail- 
able. On a command from the apparatus operator con- 
trol panel, it can be retrieved and resumed. Also, the job 
is automatically removed from the automatic print 
queue and therefore cannot block other jobs that might 
be perfectly fit for printing. 

[0009] A first embodiment of the invention is directed 
to authorization of users. Printing machines are fre- 
quently equipped with a system which counts the 
number of prints made per person for the purpose of 
calculating the costs, the system preventing non-author- 
ised users from making use of the apparatus. Non- 
authorised users may, for example, be users who have 
exceeded a permissible maximum number of prints. 
[001 0] If a user is found to be non-authorised when his 
data file for printing (of the first type, i.e. for automatic 
printing) arrives in the apparatus, the latter refuses to 
handle the print job and the file is usually lost. The user 
must then first bring his authorisation into order and can 
then re-send a print order with a copy of the data file to 
the apparatus. The user, who probably does not know 
that his authorisation has expired, does not find this out 
until he has walked to the apparatus, and then has to 
walk back to his workstation to re-send the print order. 
[0011] According to the present invention, the man- 
agement unit also maintains a list of authorised users, 
and when the management unit receives from a said 
user's workstation a file of the first type for printing: the 
management unit checks whether the relevant user is 
registered in the list of authorised users, and if so, prints 
the file, and if not, converts the file to a file of the second 
type, if necessary creates a logic storage space for the 
relevant user and stores the file in the logic storage 
space of the relevant user. 

[0012] Consequently, although the file for printing (of 
the first type) is not printed, it nevertheless remains 
available for printing on a command from the apparatus 
operator control panel, so that the user does not have to 
go back to his workstation in order to start the print job 
again. 

[0013] The same approach is applied in cases in 
which printing of a data file is not possible for other rea- 
sons. This is the case, for example, if the apparatus 
manager does not wish to accept any automatic print 
jobs because they interfere with his handling copy jobs 
or interactive print jobs. In that case, all the incoming 
files of the first type for printing are automatically con- 
verted to files of the second type, so that at least they 
are not lost, but can still be processed interactively. 
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[0014] Another case in which a print job cannot be 
executed is when not alt the conditions have been met 
for printing at the actual start of the printing operation. 
This is the case, for example, if the print paper specified 
in the print order is not in stock in the apparatus. 
Another example is that the print job is programmed for 
printing on receiving sheets introduced by manual input. 
If there is no paper present in the manual input when the 
job is started, the print job cannot be executed, In 
another embodiment of the present invention, the man- 
agement unit therefore checks, when a print process is 
started up for a print file of any of said first or second 
types, whether all the conditions for the printing are met. 
If this is not the case, it brings the file into the condition 
of a file of the second type for printing and stores the file 
in the logic storage space of the relevant user. This is 
convenient for a user, who, when he arrives at the appa- 
ratus for collecting his prints, discovers that the paper is 
used up, and his job is not printed at all. Now, he can fill 
the paper reservoir and can restart the print job without 
going back to his workstation. 

[0015] In a further embodiment, the invention is 
applied to cases in which execution of a job is broken off 
due to a fatal interruption. By a fatal interruption, an 
interruption is meant that leads to abortion of the run- 
ning process. 

[001 6] A first example of a fatal interruption is, when a 
second user at the device stops the execution of a run- 
ning print job of a first user who is not present at that 
moment. 

[001 7] When a running print job is broken off by a user 
command, the print data are normally deleted, based on 
a philosophy, that jobs are only broken off if the prints 
are are not wished at all. However, it may well happen 
that a job is broken off inadvertantly, because another 
user simply tries to make an interrupt copy job, but uses 
the wrong buttons. According to the invention, the job 
data are still preserved, and the job may be printed by 
the owner at a later time. " 

[0018] Another form of a fatal interruption of a print 
process may be a fatal error in the print process, more 
particularly, a mechanical breakdown of the process 
engine. In those cases, it may take a rather long time 
before the device can be used again, and saving the 
print data of the running job into the logical storage 
space in the memory, of the owner, excludes the risk of 
loss of the data. 

[0019] The application of the principles of the inven- 
tion is not limited to printing processes. In particular, 
fatal interruptions may also occur during other image 
conversion processes, such as scanning and copying 
(copying being a combination of scanning and printing). 
According to the present invention, also in these proc- 
esses, when the management unit finds out that a job 
cannot be performed completely, it saves the image 
data relating to the process in the logic storage space of 
the relevant user, so that the job can be resumed or 
restarted at a later time. 



[0020] For the convenience of the owner of a broken- 
off job, an error page may be printed, stating that the job 
was stopped and for what reason. Also, instructions as 
to how to restart or resume the job can be printed on the 
5 error page. 

[0021 ] The invention will now be explained with refer- 
ence to the following description and the drawings, 
wherein: 

io Rg. 1 illustrates the apparatus according to the 
invention. 

Fig. 2 is a diagram showing the constituent parts of 
the apparatus according to the invention. 
Figs. 3 and 4 illustrate the apparatus operator con- 
75 trol panel in various situations. 

Figs. 5A and 5B are flow diagrams to explain the 
operation of the apparatus accounting and security 
unit. 

Fig. 6 is a flow diagram of a process for making a 
20 copy. 

Fig. 7 is a flow diagram of a reception process for 
print files. 

Fig. 8 is a flow diagram of the initial procedure of an 
interactive printing process. 
25 Fig. 9 is a flow diagram of a printing process. 
Fig. 10 is a flow diagram of a scan process. 
Rg. 1 1 illustrates the operator control panel. 
Rg. 12 is a flow diagram of a scan process using a 
scan profile. 

30 Figs. 13 and 14 are flow diagrams of a procedure 
for making a scan profile. 

Fig. 1 5 is a flow diagram of a procedure for fetching 

a scan profile from the apparatus. 

Rg. 16 is a flow diagram of the procedure followed 
35 upon a stop command during a print job. 

Rg. 17 is a flow diagram of the procedure followed 

upon a stop command during a scan job. 

Fig. 18 is a flow diagram of the procedure followed 

upon a stop command during a copy job. 
40 Rg. 19 is a flow diagram of the procedure followed 

upon a system error. 

[0022] Fig. 1 shows the apparatus according to the 
invention, on which the different parts are shown dia- 

45 grammatically separately. 

[0023] The document feeder 1 1 0 is provided with an 
input tray 111 for the introduction of a stack of docu- 
ments, a transport mechanism (not shown) for trans- 
porting the documents one by one along the scanner 

so unit 120, and a delivery tray 112, in which the docu- 
ments are placed after scanning. 
[0024] The scanner unit 120 comprises a flat bed 
scanner provided with a glass platen on which an origi- 
nal document can be placed, a CCD array and an imag- 

55 ing unit consisting of a movable mirror and lens system 
for imaging the document on the CCD array. In these 
conditions the CCD array generates electrical signals 
which are converted into digital image data in manner 
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known per se. 

[0025] " The printer unit 130 comprises an electro-pho- 
tographic processing section known per se, in which a 
photoconductive medium is charged, exposed by 
means of an LED array in accordance with digital image s 
data, and is developed with toner powder, whereafter 
the toner image is transferred and fixed on an image 
support, usually a sheet of paper. 
[0026] A stock of image supports in different formats 
and-orientations is available in the supply section 1 40. to 
[0027] The image supports with the toner image are 
transported to the finishing and delivery section 150, 
which if necessary collects them into sets and staples 
them and then deposits them in the delivery tray 151 . 
[0028] An operator control panel 160 is provided on is 
the apparatus for operation thereof. It is provided with a 
display and keys and is connected to an operator con- 
trol unit (not shown here). 

[0029] The control electronics are shown diagram mat- 
ically by reference 170. A cable 171 connects this sec- 20 
tion of the apparatus to a local network 10 (not shown 
here). 

[0030] Fig. 2 is a diagram showing the constituent 
parts of the apparatus according to the invention. 
[0031] The apparatus 1 comprises a basic unit 2 25 
which contains a scanner unit 3, a printer unit 4, a set 
memory 5 and a control unit 6 for these units, hereinaf- 
ter termed the CopyController. 
[0032] The basic unit 2 contains the units and func- 
tions required for making a simple copy. The scanner 3 30 
during the scanning of an original document generates 
digital image data and stores them in the set memory 4, 
whereafter the printer 5 reads out the said image data 
from the set memory 4 and prints them on an image 
support, usually a sheet of paper. This process is con- 35 
trolled by the CopyController 6. The set memory 4 in 
this description also comprises an image processing 
function, although this is not essential to the present 
invention and is therefore not explained further. 
[0033] The apparatus 1 also comprises a number of 40 
units required to print digital image data which are fed 
via a local network 10 from a digital environment, and 
for exporting digital image data generated by the scan- 
ner 3 to the digital environment via the same local net- 
work 10. 45 
[0034] The term "digital environment" as used here 
denotes one or more workstations 11a, 11b, 11c, on 
which a program is operative for communication with 
the apparatus according to the invention, and which are 
also connected to the local network 10. so 
[0035] The apparatus 1 is provided with: 

a management unit 12, hereinafter referred to as 
the: JobManager, which manages the processing 
processes and also updates an administration sys- 55 
tern for all the copying, scanning and print jobs 
present, 

an operator control unit 13, also termed a: User- 



Interface (Ul), provided with an operator control 
panel on the apparatus housing, with a display and 
keys for operation of the apparatus 1 , 
an InputHandler 15 for receiving and transmitting 
digital data reaching the apparatus via the network 
10 from the digital environment and an OutputHan- 
dler 1 6 for sending digital data via the network 1 0 to 
the digital environment, 

a storage unit 20 formed by a high-capacity hard 
disk, a unit 21 hereinafter referred to as a Job- 
Server for managing the data files on the storage 
unit 20 and for controlling the processing proc- 
esses, 

a control unit 25 hereinafter referred to as a 
PrintHandler, which is dedicated to providing a 
printing process, and a control unit 26 hereinafter 
referred to as a Scan Handler, which is dedicated to 
providing a scanning process, 
an accounting and security unit 27, which inter alia 
manages the authorisation of users and access 
codes, 

a conversion unit 28 for converting digital data files 
to different formats. 

[0036] Fig. 2 shows control connections by means of 
thin arrows and data transport connections by means of 
thick arrows. 

[0037] The JobManager 1 2 is connected to the oper- 
ator control unit 13, the JobServer 21 , the CopyControl- 
ler 6, the accounting and security unit 27 and, via the 
network 10 and the InputHandler 15 and OutputHandler 
16. to the workstations 11a - c. The latter connection is 
indicated diagrammatically by direct broken-line arrows. 
Apart from being connected to the JobManager 12, the 
JobServer 21 is also connected to the storage unit 20, 
the InputHandler 15, the OutputHandler 16, the 
PrintHandler 25, the ScanHandler 26 and the conver- 
sion unit 28. The CopyController 6 is connected to the 
scanner unit 3, the set memory 4 and the printer unit 5, 
and also to the JobManager 12, the PrintHandler 25, 
the Scan handler 26 and the accounting and security 
unit 27. 

[0038] Digital data files which are sent to the appara- 
tus 1 via the network for printing are either of a first type 
or a second type. Files of the first type are required to be 
printed directly, i.e. without further action on the part of 
an operator at the apparatus, while files of the second 
type are required only to be stored in the memory of the 
apparatus and not to be printed until an operator explic- 
itly so requests at the apparatus by selecting by means 
of the operator control panel. The type of file involved is 
apparent from an attribute added to the file. 
[0039] Processing of a data file of the first type is 
referred to in this description as automatic printing (AP). 
[0040] Processing of a data file of the second type is 
referred to as interactive printing (IP). The procedure 
with this is as follows (see Fig. 2). 
[0041] A second type data file for printing sent by a 
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workstation via the network is received by the InputHan- 
dler 15. The fatter extracts from the file a number of pre- 
determined identification data and passes such data to 
JobServer 21, which in turn transmits the data to Job- 
Manager 12. In this example, the extracted identification 
data comprise the name of the owner and the name of 
the file itself. The file is then stored unchanged in the 
storage unit 20, whereafter the apparatus passes into 
the standby mode. 

[0042] JobManager 12 manages an administration 
system in which the identification data of alt the data 
files for printing stored in the storage unit 20 are 
entered. If a new file is supplied via the network, then 
the JobManager 12 adds the identification data thereof 
in connection with the name of the owner/sender to the 
administration system. 

[0043] The storage unit 20 together with the adminis- 
tration system of the JobManager 12 form, as it were, a 
set of "logic storage spaces" for data files, each logic 
storage space being allocated to one user. Thus in 
actual fact storage in the user's logic storage space 
means that the file is stored in the storage unit 20 and 
entered in the administration system in connection with 
the name of that user. A logic storage space can be pro- 
tected by a code specific to the owner/user, and in prac- 
tice this means that an operator can only obtain 
information concerning the files stored in a specific logic 
storage space after he has input this code. 
[0044] There can also be one or more logic storage 
spaces for general use which are not protected by a 
code, so that everyone has access to that logic storage 
space. All kinds of files used by numerous users, for 
example specific forms, can be stored in a public stor- 
age space of this kind. 

[0045] The manager of the apparatus can set the Job- 
Manager 12 so that it does not accept any print jobs 
which are required to be printed immediately (files of the 
first type or AP). In that case, the JobManager automat- 
ically converts such jobs into interactive print jobs (IP) 
and stores the data file in storage unit 20 in the form of 
files of the second type. 

[0046] When an operator wants to have a specific data 
file of the second type printed, he must give a command 
for this by means of the apparatus operator control 
panel 160. In response to this, the data file is brought 
out of the storage unit 20 and converted to printable 
data by the PrintHandler 25, and after intermediate stor- 
age in the set memory 4 the data are processed by the 
printer unit 5 to give a print. A print file of the second 
type can be protected by means of a code by the 
sender. This code has the form of an attribute to the 
print file. If a user wants to print this file interactively, he 
must input the security code on the operator control 
panel before the f ile is printed. 
[0047] When a data file of the second type has been 
printed, it remains in principle stored in the storage unit 
20 until it is removed by the user himself or the manager 
of the apparatus. To this end, he gives a command for 



removal of a selected file. In response to this the Job- 
Manager 12 passes a command to the JobServer 21 to 
erase the intended file from the storage unit 20 and it 
removes the identification data of that file from its 

5 administration system. 

[0048] The operator control panel 160 belonging to 
the operator control unit 13 is shown in Fig. 3 and com- 
prises a display screen 60, such as an LCD display, and 
a number of keys, namely a start key 61, number keys 

10 62, correction key 63, storage key 67 and selection keys 
64A E, 65A-D and the key cluster 66A-D. All these ele- 
ments are connected to the operator control unit 13. 
which in response to operation of the keys passes sig- 
nals to the JobManager 12 and which also controls the 

is display screen 60 to display options and messages to 
the operator. 

[0049] When the apparatus has been switched on, the 
display screen 60 displays an image formed by a 
number of vertical columns, each situated above one of 

20 the selection keys 64 A E. Each column relates to a spe- 
cific basic function of the apparatus and shows the dif- 
ferent possible settings for that basic function. For 
example, the furthest left column is allocated to the 
choice between a copying function, in which a docu- 

25 ment is scanned by the scanner and then reproduced, a 
printer function for interactive printing, in which a print is 
made using a data file of the above-mentioned second 
type sent using the network for printing, a scanner func- 
tion, in which a document is scanned while generating a 

30 scan file that can then be fetched by a workstation, and 
a deferred copying function ("scan now-print later"), in 
which a document is scanned while generating a print 
file of the second type which is stored in the storage unit 
of the apparatus and can be printed with the printer 

35 function. The setting selected at any time, the copying 
function in this case, is indicated by a marker, such as a 
. dark dot, or by highlighting. 
[0050] By actuating a selection key an operator can 
choose a different setting, e.g. in accordance with a 

40 cyclic pattern. As a result of a change of a setting the 
function of one or more of the other selection keys may 
change, because the old function is no longer relevant 
and other selection options are required. Different text 
relating to the new function then appears in the associ- 

45 ated column of the display screen 60. 

[0051] The selection keys 65A-D offer the possibility 
of bringing up a different set of functions which cannot 
be displayed by the restricted dimensions of the display 
screen 60. These are generally functions which are not 

so required for a simple copying or print job, but which offer 
the operator more options to obtain special printing 
results. In this example, these functions comprise shift- 
ing the margin on the print, adding covers, and multiple 
up. The meaning of the keys 65A-D is indicated in an 

55 associated field in the display screen 60 directly 
beneath each key. When one of the keys is actuated the 
corresponding set of functions is activated and the lay- 
out of the display screen 60 is adapted to the associated 
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functions. At the same time, this selection is displayed 
by framing or otherwise making conspicuous that field 
on the display screen 60 which belongs to the actuated 
key of the group 65A-D. 

[0052] The operator control panel 19 also contains a 
number display 70 to indicate the number of prints set, 
as is generally customary on copying machines. 
[0053] If the printer function has been selected by key 
64A in the "basic settings" group, the columns above 
the keys 64B (simplex or duplex, both in respect of the 
original document and the copy sheet), 64C (stapling) 
and 64D (the choice of format of the print paper) relate 
to the finishing of the copying job and the column above 
key 64E relates to light/dark control for the copy. 
[0054] Fig. 4 shows the layout of the display screen 60 
after the printer function for interactive printing of data 
files of the second type has been selected by key 64A in 
the group "basic settings". In this case the keys 64D and 
64E now have the function of specifying the data file for 
printing by selection of users and file name. Different 
files of the second type, from different users, may in fact 
be stored in the memory. All these files are entered in 
the administration system of the JobManager 12, as 
described above, and can be displayed on the display 
screen 60 for selection. 

[0055] After actuation of key 64D, an operator can 
select a user name from the list of users who have sent 
one or more files, and after actuation of key 64E a file 
name can be selected from the list of files sent by the 
selected user. 

[0056] In response to the actuation of key 64D the col- 
umruon the display screen above this key is provided 
with a frame 90 and a star symbol 91 to show that a user 
name can be selected and the star keys 66A-D are 
active for that selection. As a preselection, the name of 
the user who last sent a file to the machine is automati- 
cally selected as the name. 

[0057] The pair of keys 66A/B is used to proceed 
alphabetically through all the user names in the list, for- 
wards with key 66 A and backwards with key 66B. If 
there are more names than can be displayed simultane- 
ously in the frame 90, then as many names as fit within 
the frame are displayed and the whole list is automati- 
cally scrolled through. A bar having text therein in 
reverse video indicates what name has been selected. 
[0058] In response to actuation of key 64E, the col- 
umn of the display screen above that key is provided 
with a frame and a star symbol in exactly the same way 
as the procedure on actuation of key 64D as described 
above, in order to indicate that a file name can be 
selected and that the star keys 66A-D are active for that 
selection. The selection with the star keys is exactly the 
same as to that involved in the selection of a user name. 
The last file sent is selected, for example, as a preselec- 
tion. 

[0059] After selection of a file, the printing process is 

started by actuating the start key 61 . 

[0060] The operation of the accounting and security 



unit 27 will now be explained by reference to Fig. 5A and 
Fig. 5B. This unit both controls access to the copying, 
scanning and printing, and the accounting for copies, 
scans and prints made. It has available a database in 

5 which an entry can be made for each user by the appa- 
ratus manager. For a user, a user code (hereinafter 
referred to as the "PIN* 1 code) is stored at his user name 
and a total to which is added the copies and prints 
made. Each user name also has an authorisation code 

w stored to determine the authorisation of the relevant 
user to make use of the apparatus. This can be set up 
by the apparatus manager, so that access can, for 
example, be occasionally denied. The authorisation can 
also be automatically denied to a specific user if, for 

is example, a predetermined credit has been used up. 
[0061] Fig. 5A describes the case in which a user 
makes a copy or print at the apparatus. In that case he 
must first input his user code by means of the number 
keys on the operator control panel (5-1). If the code is 

20 correct (5-2), the accounting and security unit 27 checks 
the authorisation (5-3). And if this is also in order then 
the relevant user may make his copies, scans or prints 
(5-4) and these are added to the user's total usage. If 
either the user code is incorrect or the user is not 

25 authorised, then the unit 27 refuses to r el ease the appa- 
ratus for use and reports this on the display on the oper- 
ator control panel (5-5). 

[0062] Fig. 5B describes the case in which a user 
sends a digital data file from his workstation to the appa- 

30 ratus for immediate printing. The task of the accounting 
and security unit 27 then consists firstly in checking 
whether the user name, which always forms part of the 
data file, occurs in the database (5-1 1 ). 
[0063] If the database does not contain the user's 

35 name for a received print file, then the accounting and 
security unit 27 makes a new entry in the database (5- 
15) for this user's name, with an automatic authorisa- 
tion. Ttie mode in which the accounting and security 
unit 27 does this is hereinafter referred to as the 

40 "dynamic mode". It may be that the accounting and 
security unit 27 has been brought into a different mode, 
hereinafter referred to as the "static mode", by the appa- 
ratus manager, in which case the user's name is not 
added to the database and the print job is automatically 

45 not carried out (5-16). This first treatment is indicated in 
Fig. 5B in a block I having a broken-line frame. 
[0064] If the check in block I has a positive result, then 
the authorisation is checked (5-12) and if it is also in 
order then the print file is processed further (5-13), the 

so prints being added to the user's total usage. 

[0065] The access system of the accounting and 
security unit 27 can also be switched off so that anyone 
can without difficulty copy, scan and, from a workstation, 
print, in relation to a print job from the operating control 

55 panel on the apparatus, the access system remains 
partially active, namely for protecting individual print 
files, as will be described hereinafter. 
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Copying 

[0066] Fig. 6 shows the procedure for making a copy. 
It is assumed in this case that the access system of the 
accounting and security unit 27 is switched on. 
[0067] At the start of the process (6-10), the apparatus 
is in the "copying" mode or the operator selects that 
mode by means of key 64A on the operator control 
panel 160. The operator control unit 13 now waits for a 
user code and when the operator inputs this passes it 
through to the JobManager 12 (6-20). By means of the 
accounting and security unit 27 the JobManager 12 
checks the authorisation of the relevant user (6-30). If 
this is not in order, then the JobManager refuses to 
make a copy and reports this on the display on the oper- 
ator control panel 160 (6-40). 

[0068] If the authorisation is in order, then the operator 
can start copying, by making settings for the process on 
the operator control panel, placing documents in the 
input tray 1 1 1 of the document feeder 1 1 0 and actuating 
the start key 61 (6-50). The settings and the start com- 
mand are then transmitted by the operator control unit 
13 to the JobManager 12. 

[0069] If the access system of the accounting and 
security unit 27 was switched off, then step 6-50 imme- 
diately follows step 6-1 0. 

[0070] The JobManager 1 2 then gives a command to 
the CopyControlIer 6 to activate the various parts of the 
apparatus (6-60). On the command of the CopyControl- 
Ier 6 the scanner unit 3, including the document feeder 
1 10, is now started to scan documents one by one and 
pass the digital data thus generated to the set memory 
4, and the printer unit 5 is started to read the digital data 
out of the set memory 4 and print them on sheets of 
paper (6-70 and 6-80). 

[0071] When all the documents have been scanned 
and printed, the CopyControlIer 6 reports the job fin- 
ished to the JobManager 12 (6-90) and the copying 
action is completed. 

Reception of a print fife 

[0072] Fig. 7 is a description of -the procedure on the 
arrival, via the network, of a data file of the first or sec- 
ond type for printing. 

[0073] The relevant data file is received by InputHan- 
dler 15. This extracts identification data (including the 
name of the user and of the file) and print specifications 
(e.g. printing and finishing parameters), determines 
whether it is a print file of the first (AP) or of the second 
(IP) type, reports the job to the JobServer 21 and stores 
the entire file, i.e. the print specifications and the image 
data for printing, in the storage unit 20. The JobServer 
21 in turn reports the job, with the relevant data, to the 
JobManager 12. 

[0074] If the print file is of the second type, the Job- 
Manager enters the job as such in its job administration 
system, whereafter no further activities take place in 



respect of this job. 

[0075] If the print file is of the first type, the further 
handling thereof depends on whether the JobManager 
1 2 is in the mode in which it accepts automatic print jobs 
(AP). If not, the JobManager enters the print job in its 
job administration system as being an interactive print 
job IP and does not pass to direct printing. A print-out 
can be made, however, giving the reasons why the job 
has not been carried out. 

[0076] If the JobManager 1 2 is in the mode in which it 
does accept automatic print jobs, it calls in the account- 
ing and security unit 27 to determine whether the job 
can be processed. The accounting and security unit 27 
proceeds as described in connection with block I in Fig. 
5B. If this check shows that the file may not be printed, 
then the JobManager enters the print job in its job 
administration system as being an interactive print job 
(IP) and does not pass to direct printing. A message can 
be printed out on a sheet of paper, however, giving the 
reasons why the job has not been carried out. 
[0077] If the check by the accounting and security unit 
27 proves positive, the JobManager includes the job in 
the print queue for automatic print jobs (AP -queue), 
where it has to wait its turn for processing. 

In teractive printing 

[0078] Fig. 8 shows the course of events when a user 
gives an interactive print order with the aid of the opera- 
tor control means on the apparatus operator control 
panel. 

[0079] The user will start by selecting the print func- 
tion with key 64A (Fig. 3/4). The operator control unit 13 
then passes a request to the JobManager 12 to pass a 
list of all the users who have sent a print job of the sec- 
ond type that has not yet been processed. In response 
to that request, the JobManager makes up a current list 
and passes it to the operator control unit 1 3. 
[0080] The operator control unit displays this list on 
the display, in the column above key 64D (Fig. 4), 
whereafter the user can select his name. After the user 
has done this, he actuates key 64E to obtain an over- 
view of his own print jobs. In response to this, the oper- 
ator control unit 13 gives the selected users name and a 
request for a list of print jobs of that user to the JobMan- 
ager. 

[0081 ] The JobManager now asks the accounting and 
security unit 27 whether the relevant user's name 
occurs in its database. The unit 27 then proceeds as 
described in connection with block I in Fig. 5B. If the 
name really does occur in the database, the JobMan- 
ager asks the accounting and security unit 27 whether 
there is a user's code for this user's name, and, if so, it 
conducts a dialogue with the user through the agency of 
the operator control unit 13 in order to check the user's 
code. If the result is positive, the JobManager makes up 
a current list of interactive print jobs of the relevant user 
and passes it through to the operator control unit 13, 
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which submits this list to the user for selection on dis- 
play 60. 

[0082] The user now selects a print file the name of 
which is transmitted by the operator control unit 13 to 
the JobManager 12, which in turn asks the JobServer s 
21 whether a security code was sent with the selected 
file. If so, then through the agency of the operator con- 
trol unit the JobManager again carries out a dialogue 
with the user to check the code. If the result is positive, 
the JobManager releases the file for printing, and the 10 
user-can set finishing parameters on the operator con- 
trol panel, whereafter the user can start the printing 
process by actuating the start key 61 . 
[0083] If a user has sent a number of print files each 
provided with a security code and. then wants them all is 
printed interactively, then after a first print file the Job- 
Manager in the case of a subsequent print file tries out 
whether the security code of the preceding protected 
file is also valid for the current file and will start a new 
check dialogue with the user only when the current file 20 
has a different security code. In this way a user can 
work faster if he gives a series of print files the same 
security code. For printing he then only needs to input 
the code the first time. The use of a single security code 
is also convenient because the user does not then have 25 
to remember a number of different codes. 
[0084] This procedure is explained by the following 
example. Let us assume that a user has sent the follow- 
ing series of print files to the apparatus for interactive 
printing: 30 

File 1, security code 123 
File 2, security code 123 
File 3, no security code 

File 4, security code 123 35 
File 5, security code 456 
File 6, security code 456 
File 6, security code 123 

[0085] If the user now selects the files consecutively 40 
for printing at the apparatus, he must input the code 1 23 
at file 1 , whereafter the JobManager releases the docu- 
ment for printing. File 2 is automatically released 
because the code of file 1 is also valid for this. File 3 has 
no security code and is therefore printed without check- as 
ing. File 4 has \he same security code as the preceding 
protected file, and is therefore automatically released 
also. File 5 has a different security code, and here the 
user must again input a code, whereafter file 6 is auto- 
matically released. Finally, another code has to be input so 
for file 7, because although this security code was used 
previously, it is not the code of "the preceding protected 
file. 

Printing process 55 

[0086] Fig. 9 shows the progress of the printing proc- 
ess started either by the JobManager 12 when a print 
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job of the first type (AP) reaches the. head of the AP 
queue, or by the user as an interactive print job (IP). It 
should be noted here that the JobManager is so pro- 
grammed as to be able to start an automatic print job 
only if no activity has been observed on the operator 
control pane! for a predetermined time, e.g. 30 seconds. 
This prevents a user occupied in a job at the operator 
control panel from being disturbed by the sudden start 
of an automatic print job. 

[0087] If the access system of the accounting and 
security unit 27 is switched on, the JobManager now 
first checks the authorisation of the relevant user (the 
owner of the print job). If the authorisation is not in 
order, the process is interrupted. If the print job is an 
automatic print job, the JobManager records the print 
file as being of the second type and does not print it It 
is possible to make a print giving the reasons why the 
job has not been carried out. In the case of an interac- 
tive print job, the JobManager refuses the order and dis- 
plays a report thereof on the display at the operator 
control unit 13. 

[0088] If the user is authorised, the JobManager 
reports the print job to the CopyController 6 and gives a 
start command for this order to the JobServer, which in 
turn starts up the PrintHandler 25, so that the latter 
reads the relevant print file from the storage unit 20, ras- 
terises it, and stores it in the set memory 4. On a report 
from the PrintHandler to the CopyController 6 to the 
effect that sufficient image data are stored in the set 
memory, the CopyController starts the printer unit 5 to 
make a print. 

[0089] In this connection the CopyController first 
checks whether the print specifications belonging to the 
print job have been satisfied, for example if there is a 
stock of the required type of image supports (format, 
orientation, colour). If these specifications have not 
been met, then the job is stopped. The CopyController 
reports this to the PrintHandler, which passes the report 
through to the JobServer, the latter in turn passes it to 
the JobManager, and the latter reports, in the case of an 
interactive print job, the impossibility for printing to be 
carried out, to the user by a message on the display of 
the operator control unit 13 or, in the case of an auto- 
matic print job, alters the description of the job in its 
administration system to an interactive print job, so that 
a user can consequently still start the job from the oper- 
ator control panel at a later moment. Once again a print 
can be made showing the reasons why the job has not 
been carried out. 

[0090] If the print job can be processed, the printer 
unit 5 reads the image data out of the set memory 4, 
prints them, and reports this to the CopyController 6. 
When the complete print job has been carried out, the 
CopyController reports this to the PrintHandler 25, 
which passes this to the JobServer 21 , and the latter in 
turn to the JobManager 12, which then removes the job 
from its administration system, thus completing the 
printing process. 



9 



BNSDOCID: <EP 0944238A1_I_> 



15 



EP 0 944 238 A1 16 



Scanning 

[0091] Fig. 10 shows the procedure when a user 
wishes to have a document scanned by the apparatus in 
order that the digital data generated in these conditions, 5 
hereinafter referred to as the scan file, may be further 
used for processing or storage at his workstation. The 
scan file in this case is not transmitted to a predeter- 
mined address over the network immediately after gen- 
eration as is usually the case, but is stored in the 
storage unit 20 of the apparatus, whereafter it must be 
called up from a workstation. The procedure with this is 
as follows. 

[0092] Using the key 64A on the operator control 
panel of the operator control unit 13 the user selects the 
"scanner" option. In response to this the operator con- 
trol unit asks the JobManager 12 for a list of all the 
names of users known to the JobManager, i.e.: all the 
user names in the database of the accounting and secu- 
rity unit 27. As already stated previously, these user 
names can be entered in the database by the apparatus 
manager or be automatically added by the accounting 
and security unit 27 on receipt of a print order from a 
workstation. Also, when a program intended for commu- 
nication with the apparatus is started at a workstation 
this program can automatically be reported to the appa- 
ratus JobManager which then ensures that an entry for 
the user of the workstation is made in the database. 
[0093] In an alternative embodiment, the user names 
in the database are provided with an attribute which 
indicates whether they are authorised to make use of 
the scan function. In that case the list contains only the 
names of the authorised users. 
[0094] The JobManager passes the list of the user 
names through to the operator control unit 13, which 
displays this on the display 60 for selection by the oper- 
ator. This is shown in Fig. 1 1 , which illustrates the dis- 
play 60 after selection of the scanner function. 
[0095] After the user has selected his name, the oper- 
ator control unit passes this through to the JobManager 
12, which by means of the accounting and security unit 
27 then checks whether a user code is necessary to 
obtain access to the scanner function. If that is the case, 
then by means of the operator control unit 13 it conducts 
a dialogue with the user in order to check his code. In 
the case of a positive result, the JobManager releases 
the scanner function and automatically generates a 
name for the data file to be made during scanning, and 
this is passed to the. operator control unit 13, which in 
turn displays this file name on the display 60, so that the 
user subsequently knows the name by which he can 
find the scan file. This automatically generated name 
can, for example, have the form: 
YYYYMMDDhhmmssxxx, which successively shows 
the year, month, date, hour, minute and second of the 
scan action, and the serial number of the document in 
the scanned set. 

[0096] In addition, the operator control unit now dis- 



plays in a form similar to the form for selection of set- 
tings for a copying or printing process (cf. Figs. 3 and 4), 
a possible choice for parameters of the scan process, 
such as the resolution, the format (e.g. TIFF, BMP, etc.), 
the magnification factor, and whether the original docu- 
ment is to be scanned on one side or both sides. The 
user can select his settings from this or he can leave the 
preselected values as they are. The user then places 
his original documents in the input tray 1 11 of the docu- 
ment feeder 110 and actuates the start key 61. In 
response to this the operator control unit 1 3 transmits a 
start command with alt the data to the JobManager 1 2. 
[0097] The JobManager now reports the job to the 
CopyController 6 and sends a start command to the 
JobServer 21 , which in turns starts the ScanHandler 26. 
The latter transmits a start command to the CopyCon- 
troller 6, which controls the scanner unit 3 in order to 
transport the original documents one by one to the 
scanner: scan them, and generate scan files. In these 
conditions the scanner unit counts the number of origi- 
nal pages scanned. The scan files are stored in the set 
memory 4 and then transmitted to the ScanHandler,' 
which stores them in the storage unit 20. In addition, the 
image processing function of the set memory also 
makes a file with a reduced image of the scanned 
image, known as a "thumbnail", and this is also stored in 
the storage unit 20. Thumbnails of this kind are used 
later for identification in the selection of a scan file. 
[0098] When all the documents have been scanned, 
the ScanHandler 26 reports the job as finished to the 
JobServer, which in turn transmits this to the JobMan- 
ager. The latter passes the finished report to the opera- 
tor control unit 1 3, which displays it on the display 60 of 
the operator control panel, together with the number of 
pages scanned, so that the user can check whether any 
documents have been skipped. That concludes the 
scan job. 

Scanning with scan profile 

[0099] In a specific embodiment of the apparatus 
according to the invention, a user can also keep for 
other scan jobs, settings of scan parameters hereinafter 
referred to jointly as the scan profile. These parameters 
are then stored in the storage unit 20 under the user's 
name in the administration system of the JobManager 
12. A scan profile can be brought up later, so that scan 
jobs can be programmed more quickly. This is 
described in Fig. 12. The scan profile can also contain 
an individual name for the scan file made, this name 
being respected by the JobManager 12 and being used 
instead of the automatically generated file name, or be 
combined therewith. This facilitates identification of the 
file by a user. 

[0100] Fig. 12 shows the procedure in carrying out a 
scan job using a scan profile. This differs only in a lim- 
ited number of points from the procedure described 
above with reference to Fig. 10. After the JobManager 
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12 by means of the accounting and security unit 27 has 
established the fact that a user is authorised to make 
use of the scanner function and has generated a file 
name for the job that has just started, it also checks in 
its administration system whether scan profiles are $ 
stored under the name of this user. If so, it makes a list 
thereof and passes it, together with the generated file 
name, to the operator control unit 13, which displays 
both on the display. Apart from a default profile, one or 
more profiles lor general use can also be added to this 10 
list, stored in a public set in the storage unit 20. The 
reproduction of scan profiles has the same form as that 
of files for printing in Fig. 4. The default settings have 
been selected as a preference. The user can now select 
a profile from the displayed list. The selection should be 15 
confirmed by actuating the key beneath the selection 
column, whereafter the operator control unit 13 displays 
the settings of the selected profile on the display. Start- 
ing from the settings which are then applicable the user 
can then change one or more thereof. If he then actu- 2 o 
ates the start key 61 (or if he actuates the start key with- 
out selecting a different profile from the preselected 
default profile), the operator control unit 13 transmits a 
start command with the applicable settings to the Job- 
Manager 12, and the remainder of the procedure is as 2 s 
described with reference to Fig. 10. 

Making and storing the scan profile 

[0101] Fig. 13 shows the procedure for making and 30 
storing a scan profile from the apparatus operator con- 
trol panel. The storage key 67 is used for this, 
[01 02] In response to actuation of the storage key 67, 
the operator control unit 13 asks the JobManager 12 for 
a list of all the user names it knows, i.e., all the user 35 
names in the database of the accounting and security 
unit 27. 

[01 03] The JobManager passes the list of user names 
to the operator control unit 13, which displays it on the 
display 60 for selection by the operator. The operator 40 
control unit 13 also asks the operator, by a message in 
the message window on the top left of the display 60, 
whether the operator wants to make a scan or a print 
profile. The operator must respond to this by selecting 
the required function in the left-hand column above key 45 
64A, i.e. in this case "scanner". On this latter selection 
the selection screen of the chosen function is displayed 
on the display and the operator can make his settings. If 
required, he can also use the other sets of parameters, 
which can be called up with the keys 65A-D. 
[0104] The operator then again actuates storage key 
67 and in response to this the operator control unit 13 
sends the user name, function and chosen settings to 
the JobManager 12, which automatically generates a 
name for the profile, enters the profile under that name 
in its administration system in connection with the user's 
name and passes the received profile together with the 
profile name to the JobServer 21 for storage in the stor- 



age unit 20. 

[0105] The JobManager 12 then sends the generated 
profile name to the operator control unit 13, which dis- 
plays it on the display 60, where it subsequently disap- 
pears either by the start of a new operation or after 
expiry of a predetermined interval of time. 
[01 06] The automatically generated file name always 
has the extension ".pro" and if required can be replaced 
by a "rename" mechanism from the user's workstation 
by another more usable name. A standard form can be 
required, e.g. "sc_XXXXXX.pro", where XXXXXX has a 
logical text. 

[01 07] Fig. 1 4 shows the procedure in making a scan 
profile or changing an existing scan profile from a work- 
station. This requires a program specially intended to 
communicate with the apparatus. This program, which 
will hereinafter be referred to as the "WS program" has 
its own user identification and authorisation procedure 
so that the JobManager 12 does not need to repeat this 
check. 

[01 08] In the WS program a user selects a "scan pro- 
file editor". Within this sub-program the user can select 
a "new" function, by means of which a new profile is pre- 
pared. On the screen at his workstation the user then 
has a window in which he can set all the scan parame- 
ters. This can, for example, be an image identical to the 
image on the display 60 of the apparatus operator con- 
trol unit 13, with an image of the operator control keys, 
which can then be operated by means of a cursor, 
although some other representation can be given. 
[0109] If the user has made the settings and given a 
name for the profile, then on his command ("save") the 
profile is transmitted via the network to the InputHandler 
15, which stores it in the storage unit 20 and reports it to 
the JobServer 21. This passes information concerning 
the profile to the JobManager 12, which enters it in its 
administration system. 

[01 1 0] The user can also amend an existing scan pro- 
file, both in respect of the scan parameter settings and 
the name. This is possible by selecting a "recall" func- 
tion in the scan profile editor. The WS program then 
asks the JobManager 12 for the scan profiles stored 
under the name of the relevant user, and the JobMan- 
ager 12 gives an overview, which is then displayed on 
the workstation screen for selection. After the user has 
selected a specific scan profile, the WS program asks 
the JobServer 21 for the contents of that profile, and the 
JobServer 21 brings it from the storage device 20 and 
sends it via the OutputHandler 16, whereafter it is dis- 
played on the workstation screen. The user can now 
make changes and use the "save" command to save 
them, whereupon the WS program sends the new con- 
tents of the profile to the apparatus, where it is again 
stored in the storage device 20 and reported to the Job- 
Manager 12. 

[0111] The name of a scan profile always has the 
extension ".pro". 
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Fetching a scan fife using workstation 

[0112] Fig. 15 shows the procedure when a user 
wishes to fetch a scan file stored there under his name, 
using his workstation. 

[01 1 3] The WS program for communication with the 
apparatus is also required for this operation. As already 
stated, this program is provided with its own user identi- 
fication and authorisation procedure. 
[0114] in the WS program; the user now selects a 
presentation function for all the scan files stored under 
his name in the storage unit 20. The WS program then 
asks for the list of these from the JobManager 1 2, which 
compiles the list from its own administration system and 
sends it back. In addition, the JobManager 1 2 by means 
of the JobServer 21 and OutputHandler 1 6 sends to the 
workstation the thumbnail belonging to each scan file. 
This can, for example, also be the thumbnail of the first 
page of a multi-page document. 
[01 1 5] The WS prog ram now displays on the worksta- 
tion screen the list of scan files with the associated 
thumbnails for selection by the user. The user is also 
offered a choice for the transport mode (encrypted or 
not), the required format of the file, and the name under 
which the file is to be imported (note that the file still has 
an automatically generated name which contains no 
information as to the contents). After making the set- 
tings, the user selects the function "upload", whereupon 
the WS program sends a request to the JobManager 1 2 
to forward the selected file. The JobManager passes the 
order to the JobServer 21 , which compares the required 
file format with the current format in which the file is 
stored in the storage unit 20. If the two formats are dif- 
ferent, the JobServer 21 gives the conversion unit 28 an 
order to read out the file, convert it, and store it again in 
the storage unit 20. 

[01 1 6] The JobServer then starts the OutputHandler 
16 to transmit the file to the workstation. When it has 
completed its task, it reports this to the JobServer 21, 
which erases the file from the storage unit 20 and 
passes it on to the JobManager 12, which in turn 
removes the file from its administration system. Alterna- 
tively, the scan file can be kept until the user removes it 
actively. - 

Print profit 

[01 17] The use of a profile having previously prepared 
settings can also be used for interactive printing of print 
files (described with reference to Fig. 8). In that case, in 
the step in which the print files are displayed for selec- 
tion, the profiles, now referred to as print profiles, are 
also displayed. Prior to selection of a print file, the user 
can now first select a print profile, whereafter the opera- 
tor control unit 13 adapts the settings thereto. The user 
then selects a print file, whereupon everything 
progresses as already described with reference to Fig. 
8. If the user does not select a profile, then the default 



settings remain operative. 

[01 1 8] The making and storing of print profiles is com- 
pletely similar to the making and storing of scan profiles. 
In this connection reference should be made to the 
5 descriptions of Figs. 13 and 14. A print profile will have 
the genera! name "pr_XXXXXX.pro", where XXXXXX 
has a logical content. 

Deferred coovinci 

10 

[01 19] A "deferred copying" function is also supported 
by means of the described embodiments of scanning 
and printing. In this function an original document or a 
set of documents is scanned, whereafter the digital 

75 image data thus generated are stored in the storage unit 
20 under the user's name, and can then, at a later time, 
be brought up for printing. This progresses as follows. 
[01 20] The function is started by selecting the option 
"deferred copying" (scan now - print later) in the column 

20 above key 64A on the operator control panel. This is 
then followed by exactly the same procedure as 
described with reference to Fig. 10 or Fig. 12 for the 
scanning of documents, in which case the file of gener- 
ated image data is now so administered by the JobMan- 

25 ager that when the interactive print function is called up 
it is included in the list of files for selection for printing. 
The process is completed on completion of the scan 
job. 

[0121] In order then to print the file, a user should 
30 select the option "printer" in the column above key 64A 
on the operator control panel, in which case as already 
described the scan files of "deferred copying" jobs are 
now also displayed for selection in the column above 
key 64E. The printing process is fully identical to that 
35 described with reference to Fig. 8. 

[0122] In an alternative embodiment, in the case of 
"deferred printing", after completion of the scanning 
process the scan file is not stored as an interactive print 
job, but is added by the JobManager 12 to the print 
40 queue for automatic print jobs (AP queue) and automat- 
ically printed when it comes to the head of the queue. 
This embodiment is suitable particularly for situations in 
which the apparatus is placed in a central reprographic 
department, in which jobs are processed in a continu- 
es ous series. 

[01 23] A print file of the second type (IP) can be pro- 
vided with an extra attribute by the WS program, so that 
when received in the apparatus according to the inven- 
tion it is stored in the storage unit 20 under the name of 
a user other than the sender. In this way, a specific file 
can also be distributed over a group of users. The recip- 
ients, who can be warned by e-mail, then have the 
opportunity of having the file actually printed for their 
own use. If required, the recipients can also first bring 
up the intended print file to their workstation, in exactly 



55 



BNSDOCID: <EP :0944238A1 J_> 



21 



EP 0 944 238 A1 22 



the same way as described with reference to Fig. 15 in 
connection with scan files. After inspection of the file 
and the decision that it should really be printed, they 
then send the file, optionally as a file of the first or sec- 
ond type, back to the apparatus for printing there. 5 
101 24] The possibility of receiving print files from other 
users can be programmed for a specific user by means 
of the JobManager, there being added to the entry of 
that user in the database of the accounting and security 
unit 27 a data item which either authorises the receipt of io 
such files or not. This data item can if required be so 
extended that it authorises only the receipt of files from 
specific other users referred to in the data item, and 
hence obstructs those of other users. 

is 

Handling fatal in terrupt i on? 

[01 25] The invention also includes a method of saving 
a print file or scan file upon a fatal interruption of a cop- 
ying, printing or scanning process. By the term "fatal 20 
interruption" is meant an interruption that leads to abor- 
tion of the running process. Examples of fatal interrup- 
tions are a full stop command entered by an operator at 
the operator control panel of the apparatus, and an irre- 
coverable error in the system, including an engine 25 
breakdown. 

[0126] In many conventional devices, an image file 
involved in a process aborted by an operator command 
is lost. However, according to the present invention, the 
image file is stored in the storage unit 20 under the 30 
name of the user, or, if it was already stored in that way, 
it is left so. Progress information, i.e. information as to 
what part of the job had been processed already at the 
moment of the interruption, and possibly the settings 
selected for the job by the operator, is also stored. A 35 
more detailed description of the storage procedure and 
the way in which the user may restart the job is given 
below for print, scan and copy jobs. The description 
below refers to a fatal interruption having the form of a 
stop command, but it is also applicable when the job is 40 
interrupted by an irrecoverable system error. 
[0127] Fig. 16 shows a flow chart of the procedure fol- 
lowed by the JobManager 1 2 when an operator enters a 
stop command at the console 160 during a print job. 
First, the JobManager instructs the CopyController to 45 
stop the printing process. 

[0128] If the aborted job was an automatic print job, 
the JobManager converts the description of the job in its 
job administration into an interactive print job, and if it 
was an interactive print job, it is left so. Moreover, the so 
JobManager 12 marks the job as an unfinished job. 
Data relating to the selected apparatus settings (e.g. fin- 
ishing parameters) and the progress of the job are 
stored in connection to the print data. 
[0129] An error page is printed, stating that the job ss 
was aborted and for what reason. Also, the progress 
information is printed on the error page as well as 
instructions for restarting the job. After that the appara- 



tus is reset (a.o. the set memory is cleared) for a new 
job and on the display of the operating panel 160 the 
message "ready" is shown. 

[0130] The job can now always be run again com- 
pletely or partially at a later moment. In that case, the 
user has to select the job and start it in the same way as 
an interactive print job. It so happens the JobManager 
12 includes aborted jobs in the selection list presented 
to the operator as shown in Fig. 4. If the user does so, 
the JobManager 12 prompts the user, via the operator 
control unit 13, for selection of one of the options, 
namely to completely reprint the job, or to only print the 
remaining part of it. In both cases the job settings, which 
have been stored at the time of the interruption, are 
automatically reselected in order to assure that the 
printed output exactly conforms to the aborted job. 
[0131] Fig. 17 shows a flow chart of the procedure fol- 
lowed by the JobManager 12 when an operator enters a 
stop command at the console 160 during a scan job. In 
that case, the scan files already generated (however, 
only those for documents that were completely 
scanned), are read out from the set memory 4 and 
stored in the storage unit 20 under the name of the user, 
together with progress information (i.e. the number of 
documents already scanned) and the settings selected 
for the job by the operator. The JobManager 12 auto- 
matically generates a name for the file. Then an error 
page is printed, stating that the job was aborted and for 
what reason, and also stating the name generated for 
the stored file and the progress information as well as 
instructions for restarting the job. The job is marked as 
an unfinished job in the job administration by the Job- 
Manager. After that the apparatus is reset and returns to 
its default state, copying, and on the display of the oper- 
ating panel 160 the message "ready" is shown. 
[0132] At a later moment, the user can recall the 
aborted scan job by selecting it at the operator control 
panel (aborted scan jobs are presented for selection, 
after an operator has selected his name, together with 
the scan profiles, on the operator control panel display), 
and finish it. In that case, the operator may load the 
entire document set into the input tray of the document 
feeder, and the machine will automatically reselect the 
job settings, feed through the documents already 
scanned and then start scanning the remaining docu- 
merits, appending the scan files generated to the ones 
already stored. 

[01 33] If the aborted job was a copy job, it depends on 
the progress of the job, what happens. Fig. 18 shows a 
flow chart of the procedure followed by the JobManager 
12 when an operator enters a stop command at the con- 
sole during a copy job. 

[01 34] The scan and print processes, if they are run- 
ning (only one of them, or both, could be running at the 
moment of the interruption), are stopped at a command 
of the JobManager 12, which enters the aborted job as 
an unfinished copy job in its job administration. The 
scan files relating to documents already scanned 
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entirely are read out from the set memory 4 and stored 
in the storage unit 20 under the name of the user (if the 
user is not known, under a default name, such as "copy 
user") and an automatically generated file name. It is 
possible that not all documents have been scanned yet 5 
at the moment of the interruption. Further, progress 
information as to the printing process, if this was already 
running, is stored, and also the job settings selected by 
the operator. An error page is printed, stating that the 
job was aborted and for what reason, the automatically 70 
generated file name and the progress information of the 
scan process as well as the print process. Also, the 
error page contains instructions for restarting the job. 
After that the apparatus is for a new job and on the dis- 
play of the operating panel 160 the message "ready" is 15 
shown. 

[0135] When the user wants to resume the aborted 
copy job, he must select it in the same way as an inter- 
active print job (aborted copy jobs are listed among IP 
jobs in the selection list as shown in Fig. 4). If not all 20 
documents were scanned before the job was inter- 
rupted, the JobManager 12 asks the operator via the 
operator control unit 13 to load the entire document set 
into the input tray of the document feeder, and then 
automatically reselects the job settings, has the docu- 25 
ment feeder feed through the documents already 
scanned and then starts the scanning process for the 
remaining documents. The scan files generated are 
appended to the ones already stored. 
[01 36] In the meantime, the JobManager 1 2 prompts 30 
the user, via the operator control unit 1 3, for selection of 
one of the options, namely to completely reprint the job, 
or to only print the remaining part of it. In both cases the 
job settings, which have been stored at the time of the 
interruption, are automatically reselected. 35 
[0137] The mechanism for saving image data 
described above is also used in case of an irrecoverable 
system error, such as an engine breakdown. This will 
now be described. 

[0138] CopyController 6, which controls the engine 40 
processes, is connected to a plurality of sensors in the 
machine (not shown in the drawings), in order to control 
and to monitor the scanning and printing processes. 
Fig. 19 shows a flow chart of the procedure followed by 
the CopyController upon a system error. « 
[0139] When a malfunction of the system occurs, the 
CopyController 6 decides if the error can be recovered 
automatically, not-automatical ly (i.e. by an action of the 
operator) or not at all, in which latter case a service 
engineer should be called in. An example of a not -auto- so 
matically recoverable error is a paper jam in the printer 
unit 130, which can be remedied by an operator clearing 
the paper path and instructing the machine to resume 
the process. 

[0140] Generally, when the CopyController cannot ss 
recover the error itself, it instructs the operator what to 
do, by displaying instructions on the display in the oper- 
ator control panel 160. In the case of an irrecoverable 



error, it may e.g. display the text: "Call service engi- 
neer". 

[0141] Further, the CopyController 6 reports the sys- 
tem error to the JobManager 12, which, in case of an 
irrecoverable error, stores data relating to the aborted 
job in the storage unit 20. This procedure is analoguous 
to the ones described with respect to Figures 16-18, 
and will not be described further here. 
[0142] An error page is printed, stating that the job 
was aborted and for what reason. Of course, an error 
page can only be printed if the printer unit is still func- 
tioning. In the case that the job was interrupted by a sys- 
tem error, the information is stored and is printed at the 
moment the malfunction has been remedied. 
[0143] Because it may happen that an aborted job is 
not resumed but simply repeated, the JobManager 12 
has a function to automatically remove image files 
saved in the way described above after the elapse of a 
preselected time. 

[0144] In a different embodiment, progress informa- 
tion on print jobs and scan files of scan jobs are always 
stored under the name of the user after finishing each 
page. In this embodiment, the CopyController 6 reports 
each finished page to the JobManager 1 2, which enters 
the relevant information in its job administration system. 
In this way, even in the case of an error condition of the 
controllers, data are safely stored, and aborted jobs can 
always be resumed. 

[0145] Although the invention has been described with 
reference to the above exemplified embodiment, it will 
be clear to one skilled in the art that other embodiments 
are possible within the text of the claims. They will be 
considered as coming within the protection of this pat- 
ent. 

Claims 

1. A digital image processing apparatus for use by a 
plurality of users, comprising 

an image conversion unit, 
a local memory, 

a local operator control unit, integrated in the 
apparatus, provided with inputting means and 
a display, for a user to give operating com- 
mands to the apparatus, 
a management unit connected to the said - 
memory, for controlling image conversion jobs 
to be performed for a user by the image 
processing apparatus, 

said management unit maintaining a plurality of 
logic storage spaces in the memory, each allo- 
cated to a respective user, and 
said management unit being capable of storing 
data relating to an image conversion job for a 
user, in the logic storage space allocated to 
said user, from which logic storage space said 
data can exclusively be retrieved upon a com- 
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mand from a user, said command specifying 
the relevant job, 
characterized in that 

said management unit, when handling an 
image conversion job, checks whether said job 5 
can be performed completely, and in the case 
that said job cannot be performed completely, 
enters the data relating to said job in the logic 
storage space of the relevant user. 

70 

2. Apparatus according to claim 1 , wherein said man- 
agement unit is provided with means for having a 
document printed by the apparatus, stating that the . 
data relating to said job have been entered in the 
logic storage space of said relevant user. is 

3. Apparatus according to claim 1 , wherein said man- 
agement unit is provided with means for making an 
inventory of image conversion jobs of which data 
are stored in the logic storage space of a respective 20 
user, and presenting at least a sub-set of said jobs 

on the display of said operator control unit, for 
selection for the purpose of processing. 

4. Apparatus according to claim 1 , 25 

wherein said management unit manages a 
directory structure in the memory, the said logic 
storage spaces being formed by directories. 

30 

5. Apparatus according to claim 1 , 

wherein said management unit manages a 
database in the memory, the said logic storage 
spaces being lormed by entries in said data- 35 
base. 

6. A digital image processing apparatus according to 
claim 1, comprising 

40 

a printer unit, 
a local memory, 

a local operator control unit, integrated in the 
apparatus, provided with a keyboard and a dis- 
play, for a user to give operating commands to 45 
the apparatus, 

a network connection unit for coupling to a net- 
work for the purpose of communication with a 
digital external environment which comprises 
at least a number of workstations of users, so 
a management unit connected to the said 
printer unit, memory and network connecting 
unit and, via the network connecting unit, to the 
said workstations, which management unit 
maintains logic storage spaces in the memory, ss 
each allocated to a respective user, 
the network connection unit being suitable for. 
receiving from a user's workstation files of dig- 



ital data for printing by the printer unit, which 
files contain an identification of the relevant 
user and are either of a first type or of a second 
type, which first type is formed by files which 
are to be printed immediately, and which sec- 
ond type is formed by files which must be 
stored in the memory and may only be printed 
at a command from the operator control unit, 
which command identifies the relevant file, 
wherein when the management unit receives 
from a said user's workstation a file of the sec- 
ond type for printing it stores said file in the 
logic storage space of the relevant user and 
passes it for printing to the printer unit only on 
the said command from the operator control 
unit, 

characterised in that 

the management unit also maintains a list of 
authorised users, 

and when the management unit receives from 
a said user's workstation a file of the first type 
for printing the management unit checks 
whether the relevant user is registered in the 
list of authorised users, and 
if so, prints the file, and 

if not, converts the file to a file of the second 
type, if necessary creates a logic storage 
space for the relevant user and stores the file in 
the logic storage space of the relevant user. 

7. Apparatus according to claim 6, 

provided with means for bringing the manage- 
ment unit into one of two possible modes, 
in which one mode it handles files of the first 
type for printing on the basis of the list of 
authorised users and 

in which second mode it automatically converts 
files of the first type for printing into files of the 
second type, if necessary creates a logic stor- 
age space for the relevant user, and stores the 
file in the logic storage space of the relevant 
user. 

8. Apparatus according to claim 6 or 7, 

wherein at the time that a file for printing really 
is to be printed the management unit again 
checks whether the relevant user is authorised, 
and if not the management unit does not proc- 
ess the file but stores it in the logic storage 
space of the relevant user. 

9. Apparatus according to claim 8, 

which is also provided with means for updating 
a credit for each of the authorised users and for 
noting a user as being unauthorised if his credit 
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is exhausted. 



user. 



.10. Apparatus according to claim 6, 

said management unit checks, when a print 
process is started up for a print file of any of 
said first or second types, whether all the con- 
■ ditions for the printing are met, and 
if not, brings the file (back) into the condition of 
a file of the second type for printing and stores 
the file in the logic storage space of the relevant 
user. 

11. A digital image processing apparatus according to 
claim 1 , comprising 



w 
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a printer unit, 
a local memory, 

a local operator control unit, integrated in the 
apparatus, provided with a keyboard and a dis- 20 
play, for a user to give operating commands to 
the apparatus, 

a network connection unit for coupling to a net- 
work for the purpose of communication with a 
digital external environment which comprises 25 
at least a number of workstations of users, 
a management unit connected to the said 
printer unit, memory and network connecting 
unit and, via the network connecting unit, to the 
said workstations, which management unit 30 
maintains logic storage spaces in the memory 
each allocated to a respective user, 
the network connection unit being suitable for 
receiving from a user's workstation files of dig- 
ital data for printing by the printer unit, which 35 
files contain an -identification of the relevant . . 
user and are either of a first type or of a second 
type, which first type is formed by files which 
are to be printed automatically, and which sec- 
ond type is formed by files which must be 40 
stored in the memory and may only be printed 
at a command from the operator control unit, 
which command identifies the relevant file, 
wherein the management unit, upon reception 
of a file of the second type for printing from a 45 
said user's workstation, stores said file in the 
logic storage space of the relevant user and 
passes it for printing to the printer unit only on 
the said command from the operator control 
unit, so 
characterised in that 

said management unit checks, when a print 
process is started up for a print file of any of 
said first or second types, whether all the con- 
ditions for the printing are met, and ss 
if not, brings the file (back) into the condition of 
a file of the second type for printing and stores 
the file in the logic storage space of the relevant 



12. A digital image processing apparatus according to 
claim 1, comprising 

a printer unit, 
a local memory, 

a local operator control unit, integrated in the 
apparatus, provided with a keyboard and a dis- 
play, for a user to give operating commands to 
the apparatus, 

a network connection unit for coupling to a net- 
work for the purpose of communication with a 
digital external environment which comprises 
at least a number of workstations of users, 
a management unit connected to the said 
printer unit, memory and network connecting 
unit and, via the network connecting unit, to the 
said workstations, which management unit 
maintains logic storage spaces in the memory, 
each allocated to a respective user, 
the network connection unit being suitable for 
receiving from a user's workstation files of dig- 
ital data for printing by the printer unit, which 
files contain an identification of the relevant 
user and are either of a first type or of a second 
type, which first type is formed by files which 
are to be printed automatically, and which sec- 
ond type is formed by files which must be 
stored in the memory and may only be printed 
at a command from the operator control unit, 
which command identifies the relevant file, 
wherein the management unit, upon reception 
of a file of the second type for printing from a 
said user's workstation, stores said file in the 
.„ logic storage space. of the relevant user and 
passes it for printing to the printer unit only on 
the said command from the operator control 
unit, 

characterised in that 

said management unit, upon the occurrence of 
a fatal interruption of a running print process for 
a print file of any of said first or second types, 
brings the file (back) into the condition of a file 
of the second type for printing and stores data 
relating to the job in the logic storage space of 
the relevant user. 

1 3. Apparatus according to claim 12, 

wherein said management unit stores informa- 
tion concerning the progress of said print proc- 
ess up to the moment of said fatal interruption 
in the logic storage space of the relevant user 
as a part of the data relating to said job. 

14. A digital image processing apparatus according to 
claim 1 , comprising 
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a scanner unit, 
a local memory, 

a local operator control unit, integrated in the 
apparatus, provided with a keyboard and a dis- 
play, for a user to give operating commands to s 
the apparatus, 

a network connection unit for coupling to a net- 
work for the purpose of communication with a 
digital external environment which comprises 
at least a number of workstations of users, w 
a management unit connected to the said 
printer unit, memory and network connecting 
unit and, via the network connecting unit, to the 
said workstations, which management unit 
maintains logic storage spaces in the memory, is 
each allocated to a respective user, 
characterised in that 

said management unit, upon the occurrence of 
a fatal interruption of a running scan process 
forming part of a scan job, stores the data relat- 20 
ing to said scan job, including information con- 
cerning the progress of said scan job up to the 
moment of said fatal interruption, in the logic 
storage space of the relevant user. 

25 

.15. Apparatus according to claim 12 or 14, 

wherein said fatal interruption of said image 
conversion process originates from a stop 
command being inputted by a user by means of 30 
the inputting means of said operator control 
unit. 

16. Apparatus according to claim 12 or 14, 

35 

wherein said fatal interruption of said image 
conversion process originates from a fatal error 
of the image processing apparatus. 

17. Apparatus according to claim 16, 40 

wherein said fatal error of said image process- 
ing apparatus includes an engine breakdown. 
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| Stop 



JM generates file name and 
passes to Ul 



Ul displays file name 



I 



User makes settings for job, selects 
secured/not secured and presses "start" 

Ul sends command with file name (code) and 
settings to JM 



FIG. 10 



JM reports job to CC and sends start 
command to JS 



JS starts ScanHandler 



Scanhandler sends start command to CC 



CC starts scanner; the latter sends 
scanfiles via set memory to 
Scanhandler 



ScanHandler stores scan files on disk 
and reports job 

finished to JS; this passes on to JM 



JM passes to Ul and writes scan file in 
under user name 



Ul reports job as finished on display 



End 
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User selects "scanning" 

Ul asks JM for list of user names 



JM passes list to Ul 



Ul displays list 

User selects his name 

Ul passes user name to JM 



JM checks pin code requirement 
(a&s unit) 
Yes No 



pincode-dialogue; 
not OK OK 



stop 



JM generates filename; 

JM makes list of scan profiles of user (if 

present) 

JM passes file name and list to Ul 



Ul displays file name and list of scan 
profiles (if present) 



user selects default scan profile 



own scan profile 



Ul displays settings 
(user changes settings) 



User presses "start" 

Ul sends command with file name and 

settings to JM 



FIG. 12 



JM reports job to CC and sends start 
command to JS 



etc. 
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User presses storage key 
Ul asks JM for list of user names 



U( displays list and asks: 
"printing or scanning?" 
user selects his name 
user selects "printer"* 
user makes settings 
user presses storage key 
Ul passes selections to JM 




JM passes list to Ul 



* or "scanned 



JM generates profile name with extention ".pro" and 
passes to U I 



Ul displays profile name 



FIG. 13 



JM enters profile under the name of user and sends 
profile to JS 






JS stores pr 


ofile on disk 



end 
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user selects "scan profile* editor" 
on WS 



' or printprofile 



user selects *'new n 



user selects "recall" 



user makes settings tor profile 
user inputs name for profile 
user selects "save" 



WS asks JM for list of profiles of user 



. : 

WS passes profile | 
via network to IH 


with name of user) 




T 


IH stores profile on disk and reports 
profile to JS; JS passes to JM 






JM writes in profile u 
user 


mder name of 



JM gives list 





* 


user selects a profile 

WS calls up selected profile from JS 






JS sends profile to WS 
WS displays 







user changes settings and/or name 
user selects "save" 



end 
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WS passes profile (with name of user) 
via network to IH 



IH overwrites profile on disk and 

reports to JS 

this passes on to JM 



3E. 

end 
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user asks for overview of scan files 

WS program passes user name to JM and asks for list 

of user's scan files 




JM gives list of scan files (with thumbnails) 




WS program displays list (with thumbnails) 
user selects: scant tie 

transport mode 

file format 
user gives new file name 
user selects "upload" 
WS program passes command to JM 



JM passes command with selections to JS 




r 


JS co 
forma 
same 


mpares selected file format to current 
t 

3 not same 



± 

JS starts up converter; converter 
reads file from disk, converts and 
writes on disk 



FIG. 15 



1 

JSs 


r - - - yr 

tarts OH 




r 


OH reads scan file from disk and sends to WS 
of user (via network) 






OH reports "transport successful" to JS; this 
erases scan file from disk and reports to JM 




r 


JMi 


emoves scan file from administration 



± 

end 
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print job is running" 



operator enters stop command 



stop printing 



print job is 
AP 



IP 



convert 
to IP job 



enter job in job 
admin, as 
unfinished IP job, 
including settings 
and progress info 



pnnt error page 



stop; reset; 
display: "read/ 1 



FIG. 16 
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scan job is running 






operator enters ston command 


f 




stop scanning 





I 



enter job in job admin, as 
unfinished scan job; 
store complete scan files, 
incl. settings and 
progress into 
in storage unit 20; 



print error page 



stop; reset; 
display: "ready" 



BNSDOCID: <EP 094423BA1_I_> 



33 



EP 0 944 238 A1 



copy job is running 






ODerator enters stop command 


r 




stop scanning and printing 





I 



enter job in job admin, as 
unfinished copy job; 
store job data of scan and print 
processes, including settings and 
progress info, in storage unit 20 



I 



print error page 



stop; reset; 
display: "ready" 



FIG. 18 



system error occurs 



yes, auto 



automatic 

recovery 

procedure 



resume 
process 




yes, not auto 



instruct operator to 
remove error 



no 




resume process 



FIG. 19 



instruct operator to 
call service 



JM saves image file, 
job settings and 
progress info, 
and enters job in 
job administration 



print error page if possible 



stop 
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